>
> Don't you rather want to use "dst" instead of "dstdomain"?
>
From the FAQ on Access Controls :
# dst: destination (server) IP addresses
^^^^^^^^^^^^^^^^^^^^
# myip: the local IP address of a client's connection
# srcdomain: source (client) domain name
# dstdomain: destination (server) domain name
M.
